Iptables block UDP ports 137 and 138 TCP port 139 then no samba share will work from that machine =) Atleast this way it could be easily lifted if you had a need to access the shares again. Or I guess you could password all the shares so that any attempts without auth fail.